Graphw00F (inspired by wafw00f) is the GraphQL fingerprinting tool for GQL endpoints, it sends a mix of benign and malformed queries to determine the GraphQL engine running behind the scenes. graphw00f will provide insights into what security defences each technology provides out of the box, and whether they are on or off by default.
Specially crafted queries cause different GraphQL server implementations to respond uniquely to queries, mutations and subscriptions, this makes it trivial to fingerprint the backend engine and distinguish between the various GraphQL implementations. (CWE: CWE-200)
Detections
graphw00f currently attempts to discover the following GraphQL engines:
GraphQL Technologies Defence Matrices
Each fingerprinted technology (e.g. Graphene, Ariadne, …) has an associated document (example for graphene) which covers the security defence mechanisms the specific technology supports to give a better idea how the implementation may be attacked.
Field Suggestions | Query Depth Limit | Query Cost Analysis | Automatic Persisted Queries | Introspection | Debug Mode | Batch Requests |
---|---|---|---|---|---|---|
On by Default | No Support | No Support | No Support | Enabled by Default | N/A | Off by Default |
Prerequisites
git clone git@github.com:dolevf/graphw00f.git
Run graphw00f
python3 main.py -h
Usage: main.py -h
Options:
-h, –help show this help message and exit
-r, –noredirect Do not follow redirections given by 3xx responses
-t URL, –target=URL target url with the path
-o OUTPUT_FILE, –output-file=OUTPUT_FILE
Output results to a file (CSV)
-l, –list List all GraphQL technologies graphw00f is able to
detect
-v, –version Print out the current version and exit.
Example
python3 main.py -t http://127.0.0.1:5000/graphql
+——————-+
| graphw00f |
+——————-+
*** ***
** ***
** **
+————–+ +————–+
| Node X | | Node Y |
+————–+ +————–+
*** ***
** **
** **
+————+
| Node Z |
+————+
graphw00f – v1.0.0
The fingerprinting tool for GraphQL
[] Checking if GraphQL is available at https://demo.hypergraphql.org:8484/graphql… [] Found GraphQL…
[] Attempting to fingerprint… [] Discovered GraphQL Engine: (HyperGraphQL)
[!] Attack Surface Matrix: https://github.com/dolevf/graphw00f/blob/main/docs/hypergraphql.md
[!] Technologies: Java
[!] Homepage: https://www.hypergraphql.org
[*] Completed.
Burrow is an open source tool for burrowing through firewalls, built by teenagers at Hack Club.…
Simple golang webserver that listens for basic auth or post requests and sends a notification…
Nutek Security Platform for macOS and Linux operating systems. Tools for hackers, bug hunters and…
Welcome to SecureSphere Labs, your go-to destination for a curated collection of powerful hacking tools…
All in one Docker-based workstation with hacking tools for Pentesting and offsec Labs by maintained…
Got it! Below is the updated README.md file with instructions for downloading the project on…